Privacy policy
Who we are
madebymandyukcrafts ltd, trading as MadebyMandy ("we", "us"), is the data controller for personal information collected through madebymandy.co.uk. Company number 13456088, registered address 94 Upper St John Street, Lichfield, WS14 9DX. Contact: madebymandyukcrafts@gmail.com.
What we collect
- Order details: your name, delivery and billing address, email address, phone number (if given) and what you ordered.
- Personalisation details: the names, dates and messages you ask us to print. These may include information about other people, such as the recipient of a gift.
- Payment: payments are handled by our payment providers (Shopify Payments, PayPal and Klarna). We don't see or store your full card details.
- Emails: your email address, if you sign up to our marketing emails.
- Reviews: your name, review and any photos, if you leave a review.
- Website use: information collected by cookies, such as your device, browser, pages viewed and approximate location.
- Messages: anything you send us when you contact us.
How and why we use it
| Purpose | Lawful basis |
|---|---|
| Making and delivering your order, and handling returns and refunds | Performing our contract with you |
| Keeping order and accounting records | Legal obligation |
| Answering your questions | Legitimate interests |
| Sending marketing emails, including discounts and reminders about items left at checkout | Your consent – you can unsubscribe at any time using the link in every email |
| Asking for and publishing reviews | Legitimate interests |
| Running and improving our website, and preventing fraud | Legitimate interests |
| Non-essential cookies, such as analytics and advertising | Your consent, via our cookie banner |
Who we share it with
We only share your information with companies that help us run our shop:
- Shopify – our website and order system
- Payment providers – Shopify Payments, PayPal and Klarna
- Royal Mail – to deliver your order
- Judge.me – to collect and show reviews
- Advertising platforms – Google, Meta (Facebook and Instagram), Pinterest and TikTok, where you've agreed to advertising cookies.
We don't sell your personal information.
International transfers
Some of these companies store information outside the UK, for example in the USA or Canada. Where they do, they use legal safeguards approved under UK data protection law.
How long we keep it
We keep order and accounting records for 6 years, as required for tax purposes. Personalisation details are kept with your order for the same period. Marketing email details are kept until you unsubscribe.
Your rights
Under UK data protection law, you can ask us to:
- give you a copy of your information
- correct it
- delete it
- restrict or object to how we use it
- transfer it to another organisation
- stop sending you marketing emails
Email madebymandyukcrafts@gmail.com to make a request. We'll respond within one month.
If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
Children
Our website isn't intended for children under 13, and we don't knowingly collect their information.
Changes to this policy
We'll post any updates on this page.
Last updated: 8 November 2026